This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/3139352e3133382e3230332e302f32342d3234203d3e203431363636.roa File: 3139352e3133382e3230332e302f32342d3234203d3e203431363636.roa (raw, json) Hash identifier: fBAsB9iklH/Sb7k957ejcCvRBRswa9KHrBO65FjWwFo= Subject key identifier: A2:7B:F0:00:C0:D3:1E:9D:D7:EF:CA:2E:BD:30:F7:AE:E1:6A:16:E5 Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484 Certificate serial: 3FF1CE6E82A3488966F6CB492CFEBAE0C254A6D1 Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/3139352e3133382e3230332e302f32342d3234203d3e203431363636.roa Signing time: Mon 01 Dec 2025 22:23:55 +0000 ROA not before: Mon 01 Dec 2025 22:18:55 +0000 ROA not after: Mon 30 Nov 2026 22:23:55 +0000 asID: 41666 IP address blocks: 195.138.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:f1:ce:6e:82:a3:48:89:66:f6:cb:49:2c:fe:ba:e0:c2:54:a6:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484 Validity Not Before: Dec 1 22:18:55 2025 GMT Not After : Nov 30 22:23:55 2026 GMT Subject: CN=A27BF000C0D31E9DD7EFCA2EBD30F7AEE16A16E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ea:d4:2c:62:6e:d1:9e:37:0e:c8:15:b7:56: 8d:a6:de:18:29:e5:46:0b:f1:27:da:40:5b:df:be: 2c:a4:a3:5d:d0:33:17:2b:7d:16:fd:bb:94:b2:fc: 96:d1:26:bd:72:ab:98:f8:ec:f7:8b:6e:e1:07:3b: 9a:7a:e3:56:5f:86:88:ca:bf:38:d9:66:ce:88:ee: 24:d0:08:66:e2:9d:01:8c:80:a0:79:94:a7:aa:ae: 99:ad:27:54:46:fa:7c:56:58:39:68:39:73:3b:3c: 89:a2:b3:ab:f4:8e:ad:67:23:13:bd:3f:64:c6:5d: f9:ea:94:2c:39:90:61:72:0f:93:e6:cb:84:08:ba: 22:91:c4:0c:80:31:1e:3f:a0:20:41:34:19:24:29: 71:3f:5b:52:48:db:a6:c2:76:f0:18:41:93:8a:3a: 95:48:2a:34:b6:f9:20:c9:b6:96:9f:07:96:7e:bf: 78:7b:8a:df:03:94:63:59:c0:d7:2e:10:09:35:37: 48:b0:fc:1b:17:ff:c2:61:3f:02:3d:a3:1b:55:da: ce:3f:d9:62:d0:74:4d:85:9f:32:50:63:94:c7:ae: 8f:7f:16:6d:32:fa:80:6a:8e:bb:df:1a:a1:7d:df: 3d:26:aa:9b:fa:1a:18:5a:11:36:57:31:fd:05:ef: 36:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:7B:F0:00:C0:D3:1E:9D:D7:EF:CA:2E:BD:30:F7:AE:E1:6A:16:E5 X509v3 Authority Key Identifier: keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/3139352e3133382e3230332e302f32342d3234203d3e203431363636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.138.203.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:c3:93:03:57:68:1b:57:0a:19:cb:80:51:20:94:7e:fb:89: 0c:45:ef:4b:52:a8:5f:2d:60:a2:85:50:37:e3:17:c9:5e:fc: 3e:5e:92:c8:2e:00:65:20:b4:cd:f9:98:98:79:6d:d5:ba:38: 23:d8:ce:ed:a4:39:3e:d6:d2:ec:dc:c4:e1:be:be:6e:52:34: f6:3a:1b:99:a1:59:76:4f:46:78:9e:b0:6a:7c:ed:80:ba:14: 97:1c:2d:c7:59:a7:22:c2:a1:16:b7:83:f1:d0:7e:80:08:6b: a2:88:83:82:27:c0:b0:93:0d:9e:dc:ee:97:41:c5:2f:b2:cd: ee:cd:51:87:a5:b2:97:57:dd:3e:6e:56:a7:94:9b:44:3b:d9: c4:8d:fb:2a:db:db:ae:a0:59:40:86:38:82:cb:32:79:a7:4c: 27:24:89:9a:c0:0f:22:c7:f7:5a:c6:ed:92:16:e2:67:2d:d4: 4b:8a:4a:88:ae:73:90:04:ed:3a:80:40:01:27:b1:3b:d6:d0: d6:4a:ec:c9:29:c3:20:5d:e4:5c:14:54:ff:db:64:c8:cc:63: 7c:95:3d:ed:94:dc:d3:b8:ad:11:34:c7:61:ad:27:b5:a9:eb: 97:9b:9e:18:bf:dd:0f:fc:8c:c2:65:44:13:b6:3a:26:08:86: 8f:5c:da:0c -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgIUP/HOboKjSIlm9stJLP664MJUptEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZmFjNDcwOGQ3ZTI2NWRiMTA0NGY5YmIwZWU4NzI4NTg3 ZjQ4YjQ4NDAeFw0yNTEyMDEyMjE4NTVaFw0yNjExMzAyMjIzNTVaMDMxMTAvBgNV BAMTKEEyN0JGMDAwQzBEMzFFOUREN0VGQ0EyRUJEMzBGN0FFRTE2QTE2RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv6tQsYm7RnjcOyBW3Vo2m3hgp 5UYL8SfaQFvfviyko13QMxcrfRb9u5Sy/JbRJr1yq5j47PeLbuEHO5p641ZfhojK vzjZZs6I7iTQCGbinQGMgKB5lKeqrpmtJ1RG+nxWWDloOXM7PImis6v0jq1nIxO9 P2TGXfnqlCw5kGFyD5Pmy4QIuiKRxAyAMR4/oCBBNBkkKXE/W1JI26bCdvAYQZOK OpVIKjS2+SDJtpafB5Z+v3h7it8DlGNZwNcuEAk1N0iw/BsX/8JhPwI9oxtV2s4/ 2WLQdE2FnzJQY5THro9/Fm0y+oBqjrvfGqF93z0mqpv6GhhaETZXMf0F7zZlAgMB AAGjggJAMIICPDAdBgNVHQ4EFgQUonvwAMDTHp3X78ouvTD3ruFqFuUwHwYDVR0j BBgwFoAU+sRwjX4mXbEET5uw7ocoWH9ItIQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNWI1OGU2NDYtZTdhMi00NjVjLTg3YzUtNDNjMzU5YWQ5 MzY5LzAvRkFDNDcwOEQ3RTI2NURCMTA0NEY5QkIwRUU4NzI4NTg3RjQ4QjQ4NC5j cmwwZQYIKwYBBQUHAQEEWTBXMFUGCCsGAQUFBzAChklyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEtc1J3alg0bVhiRUVUNXV3N29jb1dI OUl0SVEuY2VyMIGvBggrBgEFBQcBCwSBojCBnzCBnAYIKwYBBQUHMAuGgY9yc3lu YzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzViNThlNjQ2 LWU3YTItNDY1Yy04N2M1LTQzYzM1OWFkOTM2OS8wLzMxMzkzNTJlMzEzMzM4MmUz MjMwMzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDMxMzYzNjM2LnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAw4rLMA0GCSqGSIb3DQEBCwUAA4IBAQBsw5MDV2gbVwoZy4BRIJR++4kMRe9L UqhfLWCihVA34xfJXvw+XpLILgBlILTN+ZiYeW3Vujgj2M7tpDk+1tLs3MThvr5u UjT2OhuZoVl2T0Z4nrBqfO2AuhSXHC3HWaciwqEWt4Px0H6ACGuiiIOCJ8Cwkw2e 3O6XQcUvss3uzVGHpbKXV90+blanlJtEO9nEjfsq29uuoFlAhjiCyzJ5p0wnJIma wA8ix/daxu2SFuJnLdRLikqIrnOQBO06gEABJ7E71tDWSuzJKcMgXeRcFFT/22TI zGN8lT3tlNzTuK0RNMdhrSe1qeuXm54Yv90P/IzCZUQTtjomCIaPXNoM -----END CERTIFICATE-----Generated at Sat Dec 6 12:55:00 2025 by rpki-client